Currently to add zones or modify records, the user must be a system level admin. We need a role that allows us to delegate work done for DNS zones to users/groups that don't have full admin permissions in the console.